Author
Topic: Use squid only on 443 and 80 ports (Read 73 times)

I have PFsense 2.4.2-RELEASE and Squid 0.4.43My task was to filter allowed web sites for one interface, and block others.Until now I was filtering http sites with squid and https sites with firewall rule on 443 port.Now boss is thinking to allow all sites for this interface but want to monitor which sites are visited most an by who. I found a package lightsquid and it is generating quite a good report but it takes everything from squid, so I needed to change 443 configuration from firewall rule to directly to squid.I configured WPAD and it worked, clients are going throw squid both http and https sites and I can see visited sites on lightsquid.Now I have other problem where are some web services configured in our production site on other ports rather than 80 or 443 and clients are connecting to them. It is allowed with firewall rules and after clients getting proxy settings they can't connect to web services. If i disable proxy settings on clients they can reach web service again.

Now I have two quiestions:1. Why could squid block this webservice?2. Is it possible to configure clients and squid that only 80 and 443 ports would go through squid and all other ports would be managed by firewall rules?